Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-59115 Vulnerability in microsoft (CVE-2026-59115)
vulnerability in microsoft (CVE-2026-59115). Successful exploitation can lead to full system takeover.
CVE-2026-62836 Vulnerability in microsoft (CVE-2026-62836)
vulnerability in microsoft (CVE-2026-62836). Confidential information can be exposed externally.
CVE-2026-19137 Use-After-Free in Google chrome (CVE-2026-19137)
vulnerability in Google chrome (CVE-2026-19137). Successful exploitation can lead to full system takeover.
CVE-2026-8325 Out-of-Bounds Write in autodesk (CVE-2026-8325)
out-of-bounds write in autodesk (CVE-2026-8325). Successful exploitation can lead to full system takeover.
CVE-2026-7867 Authorization Flaw in privilege-escalation (CVE-2026-7867)
vulnerability in privilege-escalation (CVE-2026-7867). Successful exploitation can lead to full system takeover.
CVE-2026-7405 Out-of-Bounds Read in dos (CVE-2026-7405)
vulnerability in dos (CVE-2026-7405). Risk of unauthorized operations or information disclosure.
CVE-2026-7406 Vulnerability in autodesk (CVE-2026-7406)
vulnerability in autodesk (CVE-2026-7406). Successful exploitation can lead to full system takeover.
CVE-2026-71445 Cross-Site Scripting (XSS) in CVE-2026-71445 (CVE-2026-71445)
cross-site scripting in CVE-2026-71445 (CVE-2026-71445). Risk of unauthorized operations or information disclosure.
CVE-2026-71446 Cross-Site Scripting (XSS) in CVE-2026-71446 (CVE-2026-71446)
cross-site scripting in CVE-2026-71446 (CVE-2026-71446). Risk of unauthorized operations or information disclosure.
CVE-2026-71447 Cross-Site Scripting (XSS) in CVE-2026-71447 (CVE-2026-71447)
cross-site scripting in CVE-2026-71447 (CVE-2026-71447). Risk of unauthorized operations or information disclosure.
CVE-2026-70635 Out-of-Bounds Read in timescale (CVE-2026-70635)
vulnerability in timescale (CVE-2026-70635). Risk of unauthorized operations or information disclosure.
CVE-2026-70638 Vulnerability in cpp (CVE-2026-70638)
vulnerability in cpp (CVE-2026-70638). Successful exploitation can lead to full system takeover.
CVE-2026-70639 Vulnerability in cpp (CVE-2026-70639)
vulnerability in cpp (CVE-2026-70639). Risk of unauthorized operations or information disclosure.
CVE-2026-70640 Vulnerability in cpp (CVE-2026-70640)
vulnerability in cpp (CVE-2026-70640). Successful exploitation can lead to full system takeover.
CVE-2026-70636 Vulnerability in CVE-2026-70636 (CVE-2026-70636)
vulnerability in CVE-2026-70636 (CVE-2026-70636). Data can be tampered with by attackers.
CVE-2026-70633 Out-of-Bounds Read in dos (CVE-2026-70633)
vulnerability in dos (CVE-2026-70633). Risk of unauthorized operations or information disclosure.
CVE-2026-70634 Out-of-Bounds Read in c (CVE-2026-70634)
vulnerability in c (CVE-2026-70634). Confidential information can be exposed externally.
CVE-2026-70632 Out-of-Bounds Write in ffmpeg (CVE-2026-70632)
out-of-bounds write in ffmpeg (CVE-2026-70632). Successful exploitation can lead to full system takeover.
CVE-2026-70629 Vulnerability in c (CVE-2026-70629)
vulnerability in c (CVE-2026-70629). Confidential information can be exposed externally.
CVE-2026-70630 Vulnerability in c (CVE-2026-70630)
vulnerability in c (CVE-2026-70630). Confidential information can be exposed externally.
CVE-2026-70631 Vulnerability in c (CVE-2026-70631)
vulnerability in c (CVE-2026-70631). Confidential information can be exposed externally.
CVE-2026-70628 Vulnerability in c (CVE-2026-70628)
vulnerability in c (CVE-2026-70628). Successful exploitation can lead to full system takeover.
CVE-2026-70559 Vulnerability in CVE-2026-70559 (CVE-2026-70559)
vulnerability in CVE-2026-70559 (CVE-2026-70559). Confidential information can be exposed externally. Exploitable via `GET /api/sysConfig/getAll`.
CVE-2026-70558 Unrestricted File Upload in CVE-2026-70558 (CVE-2026-70558)
vulnerability in CVE-2026-70558 (CVE-2026-70558). Successful exploitation can lead to full system takeover. Exploitable via `POST /download/uploadFromRsByLocal`.
CVE-2026-67688 Unrestricted File Upload in CVE-2026-67688 (CVE-2026-67688)
vulnerability in CVE-2026-67688 (CVE-2026-67688). Successful exploitation can lead to full system takeover.
CVE-2026-67687 Vulnerability in CVE-2026-67687 (CVE-2026-67687)
vulnerability in CVE-2026-67687 (CVE-2026-67687). Successful exploitation can lead to full system takeover.
CVE-2026-67689 SQL Injection in sqli (CVE-2026-67689)
SQL injection in sqli (CVE-2026-67689). Successful exploitation can lead to full system takeover. Exploitable via ``field``.
CVE-2026-67621 Vulnerability in CVE-2026-67621 (CVE-2026-67621)
vulnerability in CVE-2026-67621 (CVE-2026-67621). Data can be tampered with by attackers.
CVE-2026-64677 Path Traversal in path-traversal (CVE-2026-64677)
path traversal in path-traversal (CVE-2026-64677). Risk of unauthorized operations or information disclosure.
CVE-2026-65400 KEV [KEV] Authentication Bypass in Apple macos (CVE-2026-65400)
authentication bypass in Apple macos (CVE-2026-65400). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-64653 Path Traversal in CVE-2026-64653 (CVE-2026-64653)
path traversal in CVE-2026-64653 (CVE-2026-64653). Risk of unauthorized operations or information disclosure.
CVE-2026-62857 SSRF (Server-Side Request Forgery) in CVE-2026-62857 (CVE-2026-62857)
SSRF in CVE-2026-62857 (CVE-2026-62857). Risk of unauthorized operations or information disclosure.
CVE-2026-63725 OS Command Injection in apache (CVE-2026-63725)
OS command injection in apache (CVE-2026-63725). Successful exploitation can lead to full system takeover.
CVE-2026-5855 Out-of-Bounds Read in c (CVE-2026-5855)
vulnerability in c (CVE-2026-5855). Risk of unauthorized operations or information disclosure.
CVE-2026-5856 Out-of-Bounds Read in c (CVE-2026-5856)
vulnerability in c (CVE-2026-5856). Confidential information can be exposed externally.
CVE-2026-5857 Out-of-Bounds Write in c (CVE-2026-5857)
out-of-bounds write in c (CVE-2026-5857). Successful exploitation can lead to full system takeover.
CVE-2026-5336 Information Disclosure in wordpress (CVE-2026-5336)
vulnerability in wordpress (CVE-2026-5336). Successful exploitation can lead to full system takeover.
CVE-2026-53984 Vulnerability in CVE-2026-53984 (CVE-2026-53984)
vulnerability in CVE-2026-53984 (CVE-2026-53984). Data can be tampered with by attackers.
CVE-2026-53983 SSRF (Server-Side Request Forgery) in c (CVE-2026-53983)
SSRF in c (CVE-2026-53983). Confidential information can be exposed externally.
CVE-2026-49391 Cross-Site Scripting (XSS) in CVE-2026-49391 (CVE-2026-49391)
cross-site scripting in CVE-2026-49391 (CVE-2026-49391). Risk of unauthorized operations or information disclosure.
CVE-2026-48085 Vulnerability in csrf (CVE-2026-48085)
vulnerability in csrf (CVE-2026-48085). Successful exploitation can lead to full system takeover. Exploitable via ``default``.
CVE-2026-48088 Vulnerability in CVE-2026-48088 (CVE-2026-48088)
vulnerability in CVE-2026-48088 (CVE-2026-48088). Confidential information can be exposed externally. Exploitable via `POST /api/tenants/{tenantId}/staff/{staffId}/crypto`.
CVE-2026-48087 Authentication Bypass in CVE-2026-48087 (CVE-2026-48087)
authentication bypass in CVE-2026-48087 (CVE-2026-48087). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/auth/register/{userId}`.
CVE-2026-48086 Privilege Escalation in privilege-escalation (CVE-2026-48086)
vulnerability in privilege-escalation (CVE-2026-48086). Successful exploitation can lead to full system takeover. Exploitable via ``GLOBAL_ADMIN``.
CVE-2026-48078 Information Disclosure in CVE-2026-48078 (CVE-2026-48078)
vulnerability in CVE-2026-48078 (CVE-2026-48078). Risk of unauthorized operations or information disclosure. Exploitable via ``isPublic``.
CVE-2026-48080 Information Disclosure in ssrf (CVE-2026-48080)
vulnerability in ssrf (CVE-2026-48080). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/tenants/{id}`.
CVE-2026-48081 Cross-Site Scripting (XSS) in CVE-2026-48081 (CVE-2026-48081)
cross-site scripting in CVE-2026-48081 (CVE-2026-48081). Confidential information can be exposed externally. Exploitable via ``links``.
CVE-2026-48082 Vulnerability in CVE-2026-48082 (CVE-2026-48082)
vulnerability in CVE-2026-48082 (CVE-2026-48082). Risk of unauthorized operations or information disclosure. Exploitable via ``tunnelId``.
CVE-2026-48077 Vulnerability in CVE-2026-48077 (CVE-2026-48077)
vulnerability in CVE-2026-48077 (CVE-2026-48077). Risk of unauthorized operations or information disclosure. Exploitable via ``encryptedPayload``.
CVE-2026-48076 Authorization Flaw in CVE-2026-48076 (CVE-2026-48076)
vulnerability in CVE-2026-48076 (CVE-2026-48076). Risk of unauthorized operations or information disclosure. Exploitable via ``tenantId``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →